I cannot help but see an absurd irony in the EC (and UK) talking tough about GDPR, ostensibly caring about citizen data rights, privacy, security, and so forth, while the EU and UK introduce age verification laws that will require everyone to scan photo ID, or bio-metrics with unregulated, often unsecure and unethical verification companies, and/or insist on the implementation of AI client side scanning of every photos and message on personal devices. I have also heard that governments have been trying to force VPN companies to keep and store logs, for years after memberships have been ended.
